> For the complete documentation index, see [llms.txt](https://docs.fusion.vectra.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fusion.vectra.ai/settings/account/audit-logs.md).

# Audit Logs

## Getting Here <a href="#getting-here" id="getting-here"></a>

**Settings > Audit Logs**

## Audit Logs Page <a href="#audit-logs-page" id="audit-logs-page"></a>

The **Audit Logs** page provides detailed records of account activity, including user authentication, account usage, and system events. The page enables you to filter and query logs for better visibility and accountability.

***

### Page Controls <a href="#page-controls" id="page-controls"></a>

#### 1. Date & Time <a href="#id-1-date--time" id="id-1-date--time"></a>

* **Description**: Select a custom date and time range to filter audit logs.
* **Options**:
  * **Start Time**: Sets the beginning of the time range.
  * **End Time**: Sets the end of the time range.
  * **Now Button**: Sets the end time to the current time.

***

#### 2. NQL Query <a href="#id-2-nql-query" id="id-2-nql-query"></a>

* **Description**: Use **Network Query Language (NQL)** to filter and query log records.
* **Example Query**:

```
action == event
```

***

#### 3. Query By Account(s) <a href="#id-3-query-by-accounts" id="id-3-query-by-accounts"></a>

* **Description**: Filter logs based on specific accounts.
* **Options**: Select from the dropdown list (e.g., `netography (current)`).

***

#### 4. Search & Clear Buttons <a href="#id-4-search--clear-buttons" id="id-4-search--clear-buttons"></a>

* **Search**: Runs the query and displays filtered results.
* **Clear**: Resets all filters and queries to default.

***

### Results Table <a href="#results-table" id="results-table"></a>

The results table displays a structured view of the audit logs. It includes the following fields:

| Field           | Description                                                               |
| --------------- | ------------------------------------------------------------------------- |
| **timestamp**   | The exact date and time when the event occurred.                          |
| **class**       | The high-level category of the event (e.g., `account`, `authentication`). |
| **subclass**    | A more specific type within the class (e.g., `usage`, `login`).           |
| **action**      | The recorded action performed (e.g., `event`).                            |
| **user**        | The user or system that triggered the action.                             |
| **description** | Additional details related to the event.                                  |
| **Account**     | The account associated with the event.                                    |

***

### Example Table Output <a href="#example-table-output" id="example-table-output"></a>

| timestamp           | class          | subclass       | action | user                         | description                                                 |            |
| ------------------- | -------------- | -------------- | ------ | ---------------------------- | ----------------------------------------------------------- | ---------- |
| 2024-12-16 07:00:01 | account        | usage          | event  | netography                   | Usage collected for customers                               | netography |
| 2024-12-16 10:51:42 | authentication | login          | event  | <paula.smith@netography.com> | User "[paula.smith@...](mailto:paula.smith@netography.com)" | netography |
| 2024-12-16 10:51:43 | authentication | login          | event  | <paula.smith@netography.com> | User "[paula.smith@...](mailto:paula.smith@netography.com)" | netography |
| 2024-12-16 10:51:44 | authentication | refresh\_token | event  | <paula.smith@netography.com> | User "[paula.smith@...](mailto:paula.smith@netography.com)" | netography |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.fusion.vectra.ai/settings/account/audit-logs.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
